125 matches found
CVE-2009-1263
creationtimestamp| type| source ---|---|--- 2009-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8353...
Debian Security Advisory DSA 1266-1 (gnupg)
The remote host is missing an update to gnupg announced via advisory DSA 1266-1. Gerardo Richarte discovered that GnuPG, a free PGP replacement, provides insufficient user feedback if an OpenPGP message contains both unsigned and signed portions. Inserting text segments into an otherwise signed...
Debian Security Advisory DSA 1263-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1263-1. Several remote vulnerabilities have been discovered in in the Clam anti-virus toolkit, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems:...
SuSE 10 Security Update : gpg (ZYPP Patch Number 2994)
When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...
openSUSE 10 Security Update : gpg (gpg-2995)
When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...
[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
-------------------------------------------------------------------------- Debian Security Advisory DSA 1266-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 13th, 2007 http://www.debian.org/security/faq -...
[slackware-security] gnupg
New gnupg packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security ramifications of incorrect gpg usage. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-1263 Here are the details...
CVE-2007-1263
CVE-2007-1263 affects GnuPG 1.4.6 and earlier and GPGME before 1.1.4. The issue is that, when parsing OpenPGP messages with multiple components, signed and unsigned portions are not visually distinguished, allowing an attacker to forge the contents of a message without detection. The vulnerabilit...
CVE-2007-1263
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection...
CentOS 3 / 4 : gnupg (CESA-2007:0106)
Updated GnuPG packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Gerardo Richarte discovered that a number of applicatio...
CVE-2006-1263
CVE-2006-1263 affects WordPress prior to 2.0.2, with multiple unannounced cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML via unknown vectors. The vulnerability impacts WordPress components handling user input and rendering output, enablin...
CVE-2006-1263
Multiple "unannounced" cross-site scripting XSS vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2003-1263
CVE-2003-1263 affects the ICAL.EXE component in iCal 3.7. A malformed HTTP request (possibly due to an invalid method name) can cause a remote DoS crash. Public details consistently describe a crash condition without providing exploit code, vectors, or patched versions. The available records do n...
RHEL 3 : kernel (RHSA-2005:472)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
Fedora Core 3 : kernel-2.6.11-1.27_FC3 (2005-392)
Tue May 17 2005 Dave Jones - Remove the unused and outdated Xen patches from the FC3 tree. - Mon May 16 2005 Dave Jones - Rebase to 2.6.11.10, fixing CVE-2005-1264 - Thu May 12 2005 Dave Jones - Rebase to 2.6.11.9, fixing CVE-2005-1263 - Tue May 10 2005 Dave Jones - Fix two bugs in x86-64 page...
kernel security update
CentOS Errata and Security Advisory CESA-2005:472 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...
CVE-2005-1263
CVE-2005-1263 affects the Linux kernel: the elf_core_dump path in binfmt_elf.c can trigger a negative length in create_elf_tables, causing a buffer overflow that enables local attackers to execute arbitrary code. Affected: Linux kernel 2.x up to listed pre-release/rc versions across multiple line...
CVE-2004-1263
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program...
CVE-2004-1263
The CVE-2004-1263 issue affects ChangePassword 0.8. When installed setuid, local users can cause arbitrary code execution by manipulating the PATH to reference a malicious make program. The vulnerability stems from overriding PATH, allowing a locally executed, attacker-provided make to run with e...